GHSA-j66f-h9hm-975m
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | UmbracoCms | < 8.5.4 | 8.5.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.
References
External links from the advisory. They lead to third-party sites.